PT-2025-5869 · Ibm · Ibm Entirex

Published 2025-02-06 · Updated 2025-02-06 · CVE-2024-54171

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM EntireX version 11.1

Description The issue is related to an XML external entity injection (XXE) attack when processing XML data. An authenticated attacker could exploit this to expose sensitive information or consume memory resources.

Recommendations For IBM EntireX version 11.1, consider disabling XML external entity processing until a patch is available. Restrict access to sensitive data and monitor memory resources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XXE

Weakness Enumeration

CWE-611

Related Identifiers

BDU:2025-05327

CVE-2024-54171

Affected Products

Ibm Entirex

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-54171 · Security Note
• https://ibm.com/support/pages/node/7182693 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05327 · Security Note
• https://osv.dev/vulnerability/CVE-2024-54171 · Vendor Advisory
• https://t.me/cvedetector/17445 · Telegram Post
• https://twitter.com/CVEnew/status/1887602191214465349 · Twitter Post